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Abstract. Monoidal algebraic structures consist of operations that can 
have multiple outputs as well as multiple inputs, which have applica¬ 
tions in many areas including categorical algebra, programming language 
semantics, representation theory, algebraic quantum information, and 
quantum groups. String diagrams provide a convenient graphical syn¬ 
tax for reasoning formally about such structures, while avoiding many 
of the technical challenges of a term-based approach. Quantomatic is a 
tool that supports the (semi-)automatic construction of equational proofs 
using string diagrams. We briefly outline the theoretical basis of Quan- 
tomatic’s rewriting engine, then give an overview of the core features 
and architecture and give a simple example project that computes nor¬ 
mal forms for commutative bialgebras. 


1 Introduction 


Quantomatic is a graphical proof assistant. Rather than using terms as the 
primitive objects in proofs, it uses string diagrams. String diagrams provide a 
simple way of expressing collections of maps or processes that have been plugged 
together. They consist of boxes representing the processes, and (typed) wires 
connecting them. Wires are allowed to be open (i.e. not connected to a box) at 
one or both ends, giving a notion of input and output for a string diagram. 

String diagram notation was first used by Pen¬ 
rose [ 23 ] as an alternative to tensor notation for ap¬ 
plications in theoretical physics. In 1991, Joyal and 
Street showed that string diagrams were actually 
much more general US!. serving to not just represent 
tensors, but morphisms in any monoidal category. In 
other words, it is possible to reason about any collec¬ 
tion of processes or maps that has well-behaved par- 
Fig. 1 . A string diagram allel and sequential composition operations (usually 

written (§) and o, respectively) using string diagrams. 
This includes familiar examples such as functions (where ® := x is just the 
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Cartesian product), and other non-Cartesian examples such as multi-linear maps 
or matrices over a semi-ring (where ® is a genuine tensor product). 

Recently, there has been much interest in diagrammatic theories in a wide 
variety of areas such as Petri nets programming language semantics |2l] . 
natural language processing [3] , systems biology [71 , control theory E0, program 
parallelisation |23j , and in interactive theorem proving m ■ It has also played 
a major role in categorical quantum mechanics [lj. In particular, the string 
diagram-based ZX-calculus [6] has found numerous applications within quantum 
computing (see e.g. |9I13| 1. String diagrammatic reasoning has also produced 
results which had been previously unknown mm- 

The current version of Quantomatic supports the construction of derivations, 
which are transitive chains of diagram rewrites, as well as simple mechanisms 
for automated simplification of diagrams and lemma/theorem export and re¬ 
use. The theoretical foundations of Quantomatic have been described in previous 
papers [8118122] and this paper is the first system description of the Quantomatic 
software itself. After introducing the main concepts of diagrammatic reasoning 
in Section [2} we describe how Quantomatic builds derivations and how those 
derivations can be included in papers or shared in the web in Section [3] We show 
how to implement simplification strategies using a simple combinator language 
in Section [4] and describe an example project involving bialgebras in Section [5] 
Then, we give an overview of the architecture of the system in Section [6j and 
show how it can be extended with new graphical theories. We give details on 
obtaining Quantomatic and discuss related and future work in Section [7] 


2 Diagrammatic Reasoning 

String diagram rewriting can be seen as a generalisation of (linear) term rewrit- 
in gQ We can see how this works via a simple example. A commutative monoid 
is a set A, along with a binary operation (— • —) and a constant e £ A such that: 

(a ■ b) ■ c = a ■ (b • c) a-e = a = e-a a-b = b-a (1) 

Naturally, we can treat these equations as term rewrite rules, with free variables 
a, b, c. To apply a rule, we instantiate the free variables, then use it to replace 
a sub-term. For example, the assignment {a := x,b := y ■ e,c := z } in the first 
rule yields (x ■ (y ■ e)) ■ z = x ■ ((y ■ e) ■ z), which could be applied in, e.g.: 

w ■ ((x • (y • e)) • z) = w ■ (x • ((y • e) • z)) (2) 

We could express the same thing by rewriting string diagrams, which in this case 
are just trees. Representing • as a node with two inputs and one output and e 

1 Non-linear term rewriting can be encoded by introducing special ‘copy’ and ‘delete’ 
nodes which obey certain naturality conditions. However, when ® ^ x, these don’t 
exist in general. 








as a node with just one output, the equations <[T|) become: 


A = A A, = t = ^ A = i ( 3 ) 

a b c a b c a a a a ^ a " 

In fact, the variable names on the inputs are no longer necessary. The role of 
the variables is played by the fact that the LHS and the RHS share a common 
boundary. That is, there is a 1-to-l correspondence between inputs/outputs on 
the LHS and those on the RHS. The substitution ([2]) can then be depicted 
simply as cutting out the LHS of this rule and gluing in the RHS, using the 
shared boundary: 



The benefit of this approach is that it treats inputs and outputs symmetrically. 
For instance, we can define a cocommutative comonoid by simply flipping the 
generators and equations upside-down: 

Y=Y V- i-Y Y - ¥ 

Many interesting and useful structures arise by letting algebraic structures like 
monoids interact with their ‘coalgebraic’ counterparts. For example, a commu¬ 
tative bialgebra consists of a commutative monoid, a cocommutative comonoid, 
and three rules governing their interaction: 

X = H A-tt (*) 

Rewriting with general diagrams proceeds just like the tree rewriting above: 



This process of cutting out the LHS and gluing in the RHS along a shared bound¬ 
ary is called double-pushout (DPO) graph rewriting. The precise formulation of 
DPO rewriting for string diagrams is provided in [5j. 

From hence forth, we will assume all nodes are commutative and cocommu¬ 
tative, or in other words, nodes are invariant to permutations of their inputs 
and outputs. A current limitation of Quantomatic is that it does not maintain 
an ordering on inputs/outputs for individual nodes, so this is true by default. A 
semantics for diagrams with non-commutative nodes is detailed in m , but is 
not yet implemented (see Section [?|. 



One of the unique aspects of Quantomatic is that it supports a graphical 
pattern syntax called !-box notation for expressing infinite families of rules, typ¬ 
ically involving variable-arity generators. For example, we could alternatively 
define commutative monoids using n-ary multiplication operations, subject to 
the rules that adjacent multiplications merge and the ‘1-ary multiplication’ does 
nothing: 

Jhs,' A HI (6) 


One could recursively define these n-ary multiplications as (e.g. left-associated) 
trees of binary multiplications, where a ‘0-ary multiplication’ is just the unit. 
Then, by associativity, commutativity, and unit laws, any two trees with the same 
number of inputs will be equal, from which the two equations above follow. 

To represent repetition, we can enclose certain parts of the diagram in !- 
boxes, which indicate that the marked sub-diagram (along with any wires in or 
out) can be duplicated any number of times. Replacing the ellipses with l-boxes 
in ([b]) yields: 





(7) 


An instance of this rule effectively amounts to fixing the number times the con¬ 
tents of b and c are repeated. In order to ensure that all instances are valid string 
diagram rules (i.e. they share a common boundary), !-box rules must satisfy two 
well-formedness conditions: (i) the !-boxes on both sides are in bijective corre- 
spondance indicated by their labels, and (ii) an input (resp. output) is in a !-box 
b on the LHS if and only if it is also in b on the RHS, where pairs of inputs or 
outputs are again indicated by their labels. !-boxes can also be nested in each 
other, which adds one additional condition, but for simplicity we will ignore this 
case. More details on l-boxesand their formal semantics can be found in |18| . 


3 Constructing Proofs in Quantomatic 

Quantomatic allows a user to define a set of diagram equations and use them 
to prove theorems by means of derivations. A derivation is simply a transitive 
chain of rewrite steps, using axioms or other theorems within the project. To 



Fig. 2. Derivation editor in Quantomatic 
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Theorem 1. 

Proof. 








Fig. 3. RTpjX and interactive HTML5 output from Quantomatic 


begin working in Quantomatic, the user creates a project based on a graphical 
theory, which defines the kinds of admissible nodes in a diagram and how they 
should be presented to the user (see Section [b]). At this point, they can define 
some axioms, i.e. diagram equations (possibly containing !-boxes) subject to the 
well-formedness conditions listed at the end of Section [H 

After a set of axioms is defined, they can be used in a derivation. First, the 
user creates a new graph using the graph editor and chooses to start a new 
derivation from the menu. The user is then presented with the derivation editor, 
which is used to explore the derivation history or extend it by applying rewrite 
rules. The history view on the left shows a chain of proof steps. The history can 
also be branched off at any step, allowing the user to explore multiple (possibly 
failed) rewriting paths on the way to producing a proof. 

The nodes in this tree are organised into two categories: proof steps and 
proof heads. The former represent the application of a rewrite rule. With a proof 
step selected, the user sees the before and after graphs side-by-side, with the 
changed portion highlighted. The user can grow the derivation from a proof 
head. Here, they see the current graph next to a series of controls (as in Fig. [2]). 
If the ‘Rewrite’ panel is active, Quantomatic will eagerly look for matches of any 
active rewrite rules on the selected part of the graph on the left. This search is 
done in parallel, which is especially effective on multi-core machines at providing 
the desired rule application as soon as possible. Applying a rule will generate 
a new proof step and advance the proof head. The ‘Simplify’ panel gives the 
user access to simplification procedures (see Section [dj), which will automatically 
produce proof steps until either the procedure terminates or is interrupted by 
the user. Once a derivation is complete, it can be exported as a new theorem, 
which is linked to the derivation and can be used in other derivations. 

One of the major advantages of diagrammatic reasoning is that it can produce 
nice, human-readable proofs. Proofs produced by Quantomatic can be shared in 
two ways. Graphs, rules, and derivations can be exported as HTjrpC and \input 
directly in to papers (Fig. [3] left). The graphs are rendered using the PGF/TifcZ 
package, and are compatible with graphical editor TifcZiT, in case further manual 
tweaking is required. It is also possible to embed graphs, rules, and derivations 
from a Quantomatic project in HTML5 using Quanto.js. After linking to a 






Quantomatic project with a <meta> tag, this script will substitute specially 
marked-up <div> tags for interactive graphical views of proofs, rendered using 
d3.js (Fig. [3) right). 

4 Simplification Procedures 

Quantomatic allows for custom simplification procedures (simprocs). These are 
functions implemented in Poly/ML which send a graph to a lazy sequence of 
proof steps, which contain the name of the axiom/theorem used, the instanti¬ 
ated rewrite rule, and the rewritten graph. Simprocs are then registered with the 
Quantomatic GUI by calling register_simproc. When a simproc is invoked in 
the derivation editor, it is passed the current graph, and proof steps are pulled 
one at a time until either the sequence is exhausted or the user cancels simplifi¬ 
cation. To construct simprocs, Quantomatic provides a combinator language: 

++ :: simproc * simproc -> simproc 
LOOP :: simproc -> simproc 
REDUCE :: rule -> simproc 
REDUCE_ALL :: ruleset -> simproc 
REDUCE_WHILE :: (graph. -> bool) -> rule -> simproc 
type metric := graph -> int 
REDUCE_METRIC_TO :: int -> metric -> simproc 

The combinator ++ will chain the 
last graph produced by the first simproc 
into the second simproc. LOOP will re¬ 
peatedly chain a simproc into itself, un¬ 
til the simproc produces no new proof 
steps. REDUCE will repeatedly apply the 
first matching of the given rule, and 
REDUCE_ALL does the same, but takes a 
set of rules. REDUCE_WHILE will keep re¬ 
ducing as long as the graph satisfies the 
given pre-condition. REDUCE_METRIC_TO is 
useful for using non-terminating rules in strategies. It takes an integer k and a 
function m. It will then repeatedly apply the given rule to a graph g as long as 
m{g) > k and m{g) is reduced by the rule application. 

For terminating, confluent rewrite systems, a single call to REDUCE_ALL will 
usually suffice. However, strategies are very useful for more ill-behaved systems. 
For example, Figure [4] shows a simproc that computes pseudo-normal forms 
for the theory of interacting bialgebras described in [3], which currently has no 
known convergent completion. 

5 Example Project: Bialgebras 

As mentioned in Section [2j a bialgebra consists of a monoid and a comonoid, 
subject to three extra equations |5|. There is also a more efficient way to define 


rotate_simp.ML 


I > □ 


i open RG SirapUtH 

; val = load_rule "axioms/green elim"; 

6 val simps = load_ruleset [ 

7 "axioms/red_copy", "axioms/red_sp", "axioms/green_sp", " 

8 "axioms/red_scalar”, "axioms/green_scalar", "axioms/gree 

9 "axiomB/red_id", "axioms/red_loop 1 , "axioms/green_loop"] 


r_simproc ("rotate_si 


Fig. 4. A simproc in Quantomatic 










commutative bialgebras, following the n-ary presentation of monoids described 
in Section [2] A commutative bialgebra can be presented in terms of an n-ary 
multiplication and n-ary comultiplication, subject to the monoid ‘tree-merge’ 
rules in ([?|, as well as the comonoid versions: 



( 8 ) 


and one additional rule. Whenever an n-ary multiplication meets an m -ary co¬ 
multiplication, the two nodes can be replaced by a complete bipartite graph: 



The 5 equations depicted in ([T]), ([8]), and ([9]) can be added to a Quantomatic 
project. Since they are strongly normalising, the following naive strategy will 
compute normal forms: 

val simps = load_ruleset ["axioms/red-merge", "axioms/red-id", 
"axioms/green-merge", "axioms/green-id", "axioms/distribute"]; 
register_simproc ("basic_simp", REDUCE_ALL simps); 

This bialgebra example is a small fragment of the ZX-calculus, which has 
about 20 basic rules and necessitates non-naive simplification strategies. The 
bialgebra example and the ZX-calculus are available as projects on quantomatic. github. io. 


6 Architecture 


QuantoDerive (Scala) 
JSON Protocol 


IDE 

Protocol 

Simprocs 


Dispatcher | Worker | Worker | Worker 

QuantoCore (ML) 

| Graphs~~| | Matching^ | Rewriting] | Theories^ 
Poly/ML 


Fig. 5. Architecture of Quantomatic 

Quantomatic consists of two components: a reasoning engine written in Poly/ML 
called QuantoCore, and a GUI front-end written in Scala called QuantoDerive. 
QuantoCore handles matching and rewriting of diagrams, and can be extended 
via graphical theories. The GUI communicates to the core via a JSON protocol, 
which spawns independent workers to handle individual matching and rewriting 
requests. This allows the eager, parallel matching described in Section [3] The 
GUI also communicates directly to Poly/ML using its built-in IDE protocol to 





























register new simprocs written in ML. The core itself can be run in stand-alone 
mode or within Isabelle/ML. It forms the basis of two other graph-rewriting 
projects: QuantoCoSy [IB], which generates new graphical theories using con¬ 
jecture synthesis (cf. [H]), and Tinker jT5], which implements a graphical proof 
strategy language for Isabelle and ProofPower. 

Quantomatic is very flexible in terms of the data it can hold on nodes and 
edges. This can be something as simple as an enumerated type (e.g. a colour), 
standard types like strings and integers, or more complicated data like linear 
polynomials, lambda terms, or even full-blown programs. The specification of 
this data, along with how it should be unified during matching and displayed to 
the user, is called a graphical theory. A graphical theory consists of two parts: 
a . qtheory file loaded into the GUI and an ML structure loaded into the core. 
The .qtheory is a JSON file used to register a new theory with the GUI, and 
provides basic information such as how node/edge data should be displayed to 
the user. 

The ML structure provides four types, which Quantomatic treats as black 
boxes: nvdata, edata, psubst, and subst. The first two contain node data and 
edge data, respectively. The third type is for partial substitutions, which are used 
to accumulate state during the course of matching one diagram against another. 
The fourth type is for substitutions, which are partial substitutions that have 
been completed, or ‘solved’, after matching is done. Quantomatic accesses these 
types using several hooks implemented in by theory: 


match_nvdata 
match_edata 
solve_psubst 
subst_in_nvdata 
subst_in_edata 


nvdata * nvdata -> psubst -> psubst option 

edata * edata -> psubst -> psubst option 

psubst -> [subst] 

subst -> nvdata -> nvdata 

subst -> edata -> edata 


The first two hooks are called every time a new node or edge is matched by the 
graph rewriting engine. The first argument is a pair consisting of the data on the 
pattern node (resp. edge) and the data on the target node (resp. edge). If the 
data matches successfully, any updates such as variable instantiations or new 
constraints are added to the psubst. If it fails (e.g. by introducing unsatisfiable 
constraints), the function returns NONE. Once matching is done, solve_psubst 
is invoked to turn the accumulated constraints into an actual instantiation of 
node/edge data. Since we don’t require node/edge data to have most-general 
unifiers, this is allowed to (lazily) return multiple solutions in general. The final 
two hooks are used to perform the instantiation of node/edge data on a rewrite 
rule. Once the theory provides these and a couple of other routine functions 
(e.g. for (de)serialising data), QuantoCore handles the rest. 


7 Availability, Related, and Future Work 

Quantomatic is Free and Open Source Software, licensed under GPLv3. The 
project is hosted by Github, and source code and binaries for GNU/Linux, 




Mac OSX, and Windows are available from: quantomatic.gitliub. io Example 
projects from Section[5]are also available from the website. A page showing some 
of the features of Quanto. j s is available at: quantomatic. github. io/quantoj s . 

There are many tools for graph transformation, Quantomatic is unique in 
that it is designed specifically for diagrammatic reasoning. In other words, it 
is a general-purpose proof assistant for string-diagram based theories. Perhaps 
its closest relatives are general-purpose graph rewriting tools. GROOVE [25] is 
a tool for graph transformation whose main focus is model checking of object- 
oriented systems. Like Quantomatic, GROOVE has a mechanism for specifying 
rules that can match many different concrete graphs, namely quantified graph 
transformation rules. Other graph rewriting tools such as PROGRESS |26| and 
AGG [2S| also have mechanisms that can be used to control application of a 
single rule to many concrete graphs. All of these mechanisms have quite different 
semantics from !-box rewriting, owing to the fact that the latter is specifically 
designed for transforming string diagrams. Its an open question whether any of 
these mechanisms could encode l-boxes. 

There are three major directions in which we hope to extend Quantomatic. 
The first is in the support of non-commutative vertices and theories. The theo¬ 
retical foundation for non-commutative graphical theories with !-boxes was given 
in [T9]. A big advantage of this is the ability to define new nodes which could be 
substituted for entire diagrams. This would allow extension of a theory by arbi¬ 
trary, possibly recursive definitions. Secondly, we aim to go beyond ‘derivation- 
style’ proofs into proper, goal-based backward reasoning. In [13, we introduced 
the concept of !-box induction, which was subsequently formalised |22j . In con¬ 
junction with recursive definitions, this gives a powerful mechanism for introduc¬ 
ing new !-box equations. This would also be beneficial even for purely equational 
proofs, as it is sometimes difficult to coax Quantomatic into performing the cor¬ 
rect rewrite step in the presence of too much symmetry. It is also an important 
stepping stone toward providing QuantoCore with a genuine LCF-style proof 
kernel. Another, possibly complementary, approach is to integrate Quantomatic 
with an existing theorem prover, essentially as a ‘heavyweight tactic’ for the 
underlying formal semantics of the diagram. In m, this semantics is presented 
as a term language with wires as bound pairs of names, and we have had some 
preliminary success in formalising this language in Nominal Isabelle. Third, it 
was recently shown in [20] that placing a natural restriction on !-boxes yields 
a proper subset of context-free graph languages. Another line of future work is 
to provide support for more general context-free graph languages using vertex 
replacement grammars. This would allow us to reason about more interesting 
families of diagrams and borrow proof techniques from the rich literature on 
context-free graph grammars. 
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